STS-tool: Socio-technical Security Requirements through social commitments
STS-tool: Socio-technical Security Requirements through social commitments
复制标题
STS-工具：通过社会承诺实现社会技术安全要求
DOI：
--
复制
发表时间：
2012
期刊：
影响因子：
--
通讯作者：
P. Giorgini
中科院分区：
文献类型：
--
作者：
Elda Paja;F. Dalpiaz;Mauro Poggianella;Pierluigi Roberti;P. Giorgini
安全需求工程（Security Requirements Engineering，SRE）是一种对安全需求进行分析和启发的工程，旨在为未来的系统指定安全需求。在以前的工作中，我们已经提出了STS-ML，安全需求建模语言的社会技术系统（STS），elections安全需求，使用面向目标的方法，并根据这些需求派生的安全需求规范。特别地，STS-ml将安全性与STS中的参与者之间的交互联系起来。在本文中，我们提出了STS-ML的建模和分析支持工具STS-Tool。STS-Tool允许设计人员在高抽象级别上对STS进行建模，同时在STS中的参与者之间的交互上表达安全需求，并在建模完成后根据社会承诺（具有合同有效性的承诺）得出安全要求。
Security Requirements Engineering (SRE) deals with the elicitation and analysis of security needs to specify security requirements for the system-to-be. In previous work, we have presented STS-ml, a security requirements modelling language for Socio-Technical Systems (STSs) that elicits security needs, using a goal-oriented approach, and derives the security requirements specification based on these needs. Particularly, STS-ml relates security to the interaction among actors in the STS. In this paper, we present STS-Tool, the modelling and analysis support tool for STS-ml. STS-Tool allows designers to model a STS at a high-level of abstraction, while expressing security needs over the interactions between the actors in the STS, and derive security requirements in terms of social commitments - promises with contractual validity - once the modelling is done.